CVE-2018-20092

概要

参考情報

• doyler.net/security-not-included/ptc-thingworx-vulnerability
• ptc.com/en/documents/security/coordinated-vulnerability-disclosure/security-vulnerabilities · Vendor Advisory

thingworx platform のその他の脆弱性

• CVE-2018-17218中 5.4An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is reflected XSS in the SQUEAL search function.
• CVE-2018-17217高 7.5An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is a hardcoded encryption key.
• CVE-2018-17216中 6.5An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is password hash exposure to privileged users.